Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa
File: ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa (raw, json)
Hash identifier: 5uKveASNNkoz3m6Z/IoI5wPaRI1/s/iR92XdJr3b/vs=
Subject key identifier: 13:1C:26:A6:60:A8:40:9A:36:3B:14:C6:BD:2F:6D:05:45:68:09:32
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 019425223399EDA36387D231292AC1A20578
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48172
IP address blocks: 194.33.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:33:99:ed:a3:63:87:d2:31:29:2a:c1:a2:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=131c26a660a8409a363b14c6bd2f6d0545680932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e8:63:da:ed:0b:16:a9:0d:6d:63:d7:d7:e3:
1b:90:ef:cf:b1:47:5e:95:05:e2:7b:39:ad:ea:ba:
fa:28:51:d0:f9:78:71:66:a9:13:7a:e1:c6:93:cd:
de:06:c2:6a:91:c9:18:8e:83:65:ab:db:3a:7e:b7:
de:bf:c9:9c:22:aa:d2:cf:db:2a:d0:e7:21:3f:4e:
e9:cb:e0:ee:8e:a4:aa:10:9e:03:82:39:07:63:dd:
1a:91:d3:a9:34:b0:77:ed:f6:47:cc:23:78:fc:50:
55:40:09:64:62:9a:f8:3c:ea:60:7c:52:51:d4:9d:
fc:9d:ec:88:d6:87:99:c1:49:ea:da:b1:70:94:45:
45:3f:aa:14:b4:8e:c5:5e:52:20:7a:fb:10:20:d7:
92:17:97:03:2f:ee:3c:6d:b6:f4:8a:b3:89:b9:b4:
57:1c:99:d8:7f:47:ad:5d:36:86:95:0a:0e:8d:24:
34:ee:cb:ae:7e:c8:83:7e:60:e3:dc:73:12:24:08:
fa:48:c9:d1:bc:60:24:b5:a8:b6:e6:5f:19:e1:1d:
8e:62:d1:96:bb:ff:fe:8d:a9:9d:0c:84:fb:87:19:
58:7a:39:fd:05:e7:c7:3d:c6:f2:30:41:fe:9d:2b:
2d:4e:08:e7:1a:1b:e5:d1:70:51:76:8a:72:eb:41:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:26:A6:60:A8:40:9A:36:3B:14:C6:BD:2F:6D:05:45:68:09:32
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/ExwmpmCoQJo2OxTGvS9tBUVoCTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:5e:92:26:6c:3e:4f:93:7c:ec:bb:16:0e:1b:5b:14:ad:bb:
5e:9d:de:d6:94:4e:48:af:60:71:75:14:c6:50:2d:3c:40:e2:
f9:e7:9d:af:02:8e:f1:68:4b:e5:53:a4:e3:4d:89:04:ce:bd:
52:b1:d1:26:eb:ed:41:44:bf:51:66:ae:ba:81:b5:52:4d:7a:
a2:30:47:eb:2a:0f:45:bb:99:76:fc:a5:21:e0:e5:9c:15:37:
73:2a:cc:fc:44:72:c7:21:1c:15:6e:15:8b:03:f3:8f:cf:d8:
3e:82:6d:4f:0f:38:13:55:95:b0:eb:14:98:83:e2:b2:50:17:
4e:c9:7c:e7:a3:e1:ed:0c:c2:58:b1:16:f4:ff:4e:7e:74:ad:
30:4e:bb:9c:60:a8:b0:53:da:46:b8:42:70:1d:fd:37:20:39:
30:b5:7d:55:d2:ec:ab:b9:35:75:af:e5:a9:8b:01:ee:99:f5:
d8:f0:45:6b:8f:c0:91:5c:f1:7b:e6:28:fd:1e:92:62:9a:31:
fb:f1:1f:01:d2:5d:a5:e7:04:51:98:bb:7b:ee:d9:5a:b6:99:
f4:10:01:cb:20:3e:16:6a:df:5f:a3:7f:cb:31:dd:c2:4a:15:
ed:ac:97:a5:eb:ce:f4:97:02:ac:0d:a9:24:4f:c6:9d:3b:a4:
e2:13:16:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIjOZ7aNjh9IxKSrBogV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlODk1ZjFlMjcwYzYzNWVjNjFkZjlhOTdmYzBmNjY4YzBh
OGY1NDgwHhcNMjUwMTAyMDM0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzFjMjZhNjYwYTg0MDlhMzYzYjE0YzZiZDJmNmQwNTQ1NjgwOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+hj2u0LFqkNbWPX1+MbkO/PsUde
lQXiezmt6rr6KFHQ+XhxZqkTeuHGk83eBsJqkckYjoNlq9s6frfev8mcIqrSz9sq
0OchP07py+DujqSqEJ4DgjkHY90akdOpNLB37fZHzCN4/FBVQAlkYpr4POpgfFJR
1J38neyI1oeZwUnq2rFwlEVFP6oUtI7FXlIgevsQINeSF5cDL+48bbb0irOJubRX
HJnYf0etXTaGlQoOjSQ07suufsiDfmDj3HMSJAj6SMnRvGAktai25l8Z4R2OYtGW
u//+jamdDIT7hxlYejn9BefHPcbyMEH+nSstTgjnGhvl0XBRdopy60GBkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMcJqZgqECaNjsUxr0vbQVFaAkyMB8GA1UdIwQY
MBaAFI6JXx4nDGNexh35qX/A9mjAqPVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEt
ZTY5YTAxNzQ4NWZiLzEvRXh3bXBtQ29RSm8yT3hUR3ZTOXRCVVZvQ1RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9iYzUzZDItOTEzNy00Nzk5LTllNDEtZTY5YTAxNzQ4NWZi
LzEvam9sZkhpY01ZMTdHSGZtcGY4RDJhTUNvOVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiFyMA0G
CSqGSIb3DQEBCwUAA4IBAQBsXpImbD5Pk3zsuxYOG1sUrbtend7WlE5Ir2BxdRTG
UC08QOL5552vAo7xaEvlU6TjTYkEzr1SsdEm6+1BRL9RZq66gbVSTXqiMEfrKg9F
u5l2/KUh4OWcFTdzKsz8RHLHIRwVbhWLA/OPz9g+gm1PDzgTVZWw6xSYg+KyUBdO
yXzno+HtDMJYsRb0/05+dK0wTrucYKiwU9pGuEJwHf03IDkwtX1V0uyruTV1r+Wp
iwHumfXY8EVrj8CRXPF75ij9HpJimjH78R8B0l2l5wRRmLt77tlatpn0EAHLID4W
at9fo3/LMd3CShXtrJel6870lwKsDakkT8adO6TiExax
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net